Debian Bug report logs - #749801
xorriso: incompatible licenses?!

version graph

Package: xorriso; Maintainer for xorriso is Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>; Source for xorriso is src:libisoburn (PTS, buildd, popcon).

Reported by: Jakub Wilk <jwilk@debian.org>

Date: Thu, 29 May 2014 21:18:01 UTC

Severity: normal

Found in version libisoburn/1.3.2-1

Fixed in version libisoburn/1.4.0-2

Done: Thomas Schmitt <scdbackup@gmx.net>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, jwilk@debian.org, Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>:
Bug#749801; Package xorriso. (Thu, 29 May 2014 21:18:06 GMT) (full text, mbox, link).


Message #3 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jakub Wilk <jwilk@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: xorriso: incompatible licenses?!
Date: Thu, 29 May 2014 23:15:20 +0200
Package: xorriso
Version: 1.3.2-1
User: debian-qa@lists.debian.org
Usertags: adequate incompatible-licenses

The xorriso's copyright file says:

Files: *
License: GPL-2

But /usr/bin/xorriso is linked to libreadline6, which is GPLv3+. These 
two licenses are not compatible.

But perhaps there's no license incompatibility, just a buggy copyright 
file? I couldn't find any evidence in the upstream code that the license 
is GPLv2-only. On the contrary, upstream COPYRIGHT file reads:

This program is free software; you can redistribute it and/or modify it 
under the terms of the GNU General Public License version 2 or later as 
published by the Free Software Foundation.

So presumably debian/copyright should use this instead:

License: GPL-2+


<advert>
This bug was brought to you by adequate:
https://packages.debian.org/unstable/main/adequate
</advert>

-- System Information:
Debian Release: jessie/sid
 APT prefers unstable
 APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xorriso depends on:
ii  libacl1       2.2.52-1
ii  libburn4      1.3.2-1
ii  libc6         2.18-7
ii  libisoburn1   1.3.2-1
ii  libisofs6     1.3.2-1
ii  libjte1       1.19-2
ii  libreadline6  6.3-6
ii  zlib1g        1:1.2.8.dfsg-1

-- 
Jakub Wilk



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>:
Bug#749801; Package xorriso. (Fri, 30 May 2014 06:45:08 GMT) (full text, mbox, link).


Acknowledgement sent to "Thomas Schmitt" <scdbackup@gmx.net>:
Extra info received and forwarded to list. Copy sent to Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>. (Fri, 30 May 2014 06:45:08 GMT) (full text, mbox, link).


Message #8 received at 749801@bugs.debian.org (full text, mbox, reply):

From: "Thomas Schmitt" <scdbackup@gmx.net>
To: 749801@bugs.debian.org
Subject: Re: xorriso: incompatible licenses?!
Date: Fri, 30 May 2014 08:40:50 +0200
Hi,

the libisoburn tarball which contains xorriso is indeed GPLv2+.
(The GNU xorriso package gets derived a GPLv3+ from this.)

Nevertheless it is not intentional that the binary from libisoburn
becomes GPLv3 by linking an optional library. Especially it then
still states at run time:
  $ xorriso -version
  ...
  Provided under GNU GPL version 2 or later

No reason to be sued, but somehow unfortunate.
I will have to think about this.


Have a nice day :)

Thomas




Information forwarded to debian-bugs-dist@lists.debian.org, Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>:
Bug#749801; Package xorriso. (Sun, 15 Jun 2014 14:03:08 GMT) (full text, mbox, link).


Acknowledgement sent to "Thomas Schmitt" <scdbackup@gmx.net>:
Extra info received and forwarded to list. Copy sent to Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>. (Sun, 15 Jun 2014 14:03:08 GMT) (full text, mbox, link).


Message #13 received at 749801@bugs.debian.org (full text, mbox, reply):

From: "Thomas Schmitt" <scdbackup@gmx.net>
To: 749801@bugs.debian.org
Subject: Re: xorriso: incompatible licenses?!
Date: Sun, 15 Jun 2014 16:00:44 +0200
Hi,

i asked bug-libreadline for advise how to detect GPLv3 versions.
The answer is: readline.h macro RL_VERSION_MAJOR >= 6 means GPLv3+.

There is no API call provided to detect the version at run time.
So Debian should please do its best to prevent libisoburn compiled
with libreadline-5 from running on libreadline-6.
I checked with a binary from SuSE 10 on Debian 6. It was linked
correctly with libreadline.so.5. So its statement GPLv2+ stays true.

After
  http://libburnia-project.org/changeset/5342
libisoburn compiled on Debian 6 with readline.h of libreadline-6
tells with command -version:

  Provided under GNU GPL version 3 or later, due to libreadline license.

The next release of libisoburn will be able to use libedit if
libreadline is disabled or not found.

So if Debian is interested in keeping libisoburn at GPLv2+, then
libedit would be a way to go. (I am testing it on NetBSD.)

  ./configure --disable-libreadline --enable-libedit

(In order to stay compatible with past behavior, --disable-libreadline
 alone disables any command line editor.
 By default libedit is a fallback for libreadline.)


Have a nice day :)

Thomas




Reply sent to Thomas Schmitt <scdbackup@gmx.net>:
You have taken responsibility. (Fri, 11 Sep 2015 16:24:15 GMT) (full text, mbox, link).


Notification sent to Jakub Wilk <jwilk@debian.org>:
Bug acknowledged by developer. (Fri, 11 Sep 2015 16:24:15 GMT) (full text, mbox, link).


Message #18 received at 749801-close@bugs.debian.org (full text, mbox, reply):

From: Thomas Schmitt <scdbackup@gmx.net>
To: 749801-close@bugs.debian.org
Subject: Bug#749801: fixed in libisoburn 1.4.0-2
Date: Fri, 11 Sep 2015 16:21:38 +0000
Source: libisoburn
Source-Version: 1.4.0-2

We believe that the bug you reported is fixed in the latest version of
libisoburn, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 749801@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Schmitt <scdbackup@gmx.net> (supplier of updated libisoburn package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 09 Sep 2015 15:21:05 +0200
Source: libisoburn
Binary: libisoburn1 libisoburn-dbg libisoburn-doc libisoburn-dev xorriso
Architecture: source amd64 all
Version: 1.4.0-2
Distribution: unstable
Urgency: low
Maintainer: Debian Libburnia packagers <pkg-libburnia-devel@lists.alioth.debian.org>
Changed-By: Thomas Schmitt <scdbackup@gmx.net>
Description:
 libisoburn-dbg - debugging symbols for libisoburn and xorriso
 libisoburn-dev - development package for libisoburn
 libisoburn-doc - documentation package for libisoburn
 libisoburn1 - library to handle creation and inspection of ISO-9660 file system
 xorriso    - command line ISO-9660 and Rock Ridge manipulation tool
Closes: 688527 738359 749801 787793
Changes:
 libisoburn (1.4.0-2) unstable; urgency=low
 .
   * New upstream release. (Closes: #787793)
     + Bug fix: Command -blank "as_needed" formatted blank BD-R.
     + Bug fix: -as mkisofs option -log-file put the log file into the image
     + Bug fix: -cut_out did not add x-permission to r-permission of directory
     + Bug fix: Command -zisofs did not accept all options emitted by
                -status -zisofs
     + Bug fix: -blank force:... failed on appendable or closed media
     + Bug fix: Paths with symbolic links preceding ".." were not interpreted
                properly (Closes: #738359)
     + Bug fix: -blank force:all on DVD+RW had no effect
     + Bug fix: -dev or -indev of medium with non-ISO data caused SIGSEGV
                by NULL
     + New command -read_speed
     + New -close mode "as_needed", new -as cdrecord option --multi_if_possible
     + New -alter_date types: a-c , m-c , b-c , c
     + New -compliance rule joliet_utf16, new -as mkisofs option -joliet-utf16
     + New -find test -bad_outname, new -find action print_outname
     + New bootspecs hppa_*, new -as mkisofs options -hppa-* for HP-PA via PALO
     + New -find pseudo tests -use_pattern , -or_use_pattern
     + New -find action report_sections
     + New command -concat
     + New commands -report_system_area and -report_el_torito
     + New -find action "show_stream_id"
     + Optional libisofs interval reader with -append_partition and System Area
     + New -boot_image bootspec "appended_part_as=",
       new -as mkisofs option -appended_part_as_gpt
     + New API call isoburn_conv_name_chars()
     + New isoburn_igopt_set_relaxed() relaxation isoburn_igopt_joliet_utf16
     + New API calls isoburn_igopt_set_stdio_endsync() and
       isoburn_igopt_get_stdio_endsync
     + New API calls isoburn_igopt_set_appended_as_gpt(),
       isoburn_igopt_get_appended_as_gpt()
     + New API call isoburn_igopt_set_part_flag()
       and libisofs interval reader flags
     + New -report_system_area formats "cmd" and "as_mkisofs"
     + Corrected license statement if GPL-3 libreadline is linked.
       (Closes: #749801)
   * Closing older fixed bug: libisoburn-1.2.6 (Closes: #688527)
   * Removed dependency on doxygen
   * Added all content of libisoburn-*/doc/ to debian/libisoburn-doc.docs
   * Updated debian/local/libisoburn.3
   * Silenced warning of dpkg-buildpackage about libpthread by
     patches/01-silence-warning-libpthread.patch . (Also Applied-Upstream.)
   * Corrected license of upstream to GPL-2+ (from GPL-2)
   * Migrated to debhelper 9 and applied changes proposed by cme.
   * Added myself to Uploaders after becoming co-admin of the maintainer project
Checksums-Sha1:
 d57f6b5889bb867be74f03caa5c8e0853f8d604f 2349 libisoburn_1.4.0-2.dsc
 832b429479e87e3bc8daab4a300d0773d046d582 1453974 libisoburn_1.4.0.orig.tar.gz
 b6062f37ccf3e43c38b7fca78f8966661757a19b 13428 libisoburn_1.4.0-2.debian.tar.xz
 40d78da8d6a666064a22297235b886923234fee2 876146 libisoburn-dbg_1.4.0-2_amd64.deb
 502a38ab8de655dee1a74852a37c786b2b0ebbe4 423754 libisoburn-dev_1.4.0-2_amd64.deb
 e83472d4e6319f331f3f5e37bcbea7bbe014dee9 64378 libisoburn-doc_1.4.0-2_all.deb
 14c9c881171eddaab53ef6ea7c525486f9f5d02a 365120 libisoburn1_1.4.0-2_amd64.deb
 6f7d01a84d2d5fc9b6d0b938339e67fbb717cd8d 144378 xorriso_1.4.0-2_amd64.deb
Checksums-Sha256:
 f08643150e9c4c425e4fd2f8def74cd9e359d2fcb8961cddad412f202e455377 2349 libisoburn_1.4.0-2.dsc
 c1d51ae7e4662f75caae4442071b8e1480efb8e80682a9f82c32a76f30ba6421 1453974 libisoburn_1.4.0.orig.tar.gz
 0f55512943f55894f320ed2186207cbb22a5ddc9fb52bbf1c43956f0fa4e9732 13428 libisoburn_1.4.0-2.debian.tar.xz
 0599da76c5bf55a91db6213c543df1230d26e7d70b4bc1a4b4d61fc2b64cd099 876146 libisoburn-dbg_1.4.0-2_amd64.deb
 b0def6923a08ef9fb655dc43e5af2065a9ca85104a302a655b2eb70bc073b049 423754 libisoburn-dev_1.4.0-2_amd64.deb
 231b8f24eb048e8cae3658cd6c8a4e89186efba5319fc0b9d0936f89e520cb09 64378 libisoburn-doc_1.4.0-2_all.deb
 a536a543aee64e2bd11441979be4cacee3c4df2de574e93e24142007a24154ab 365120 libisoburn1_1.4.0-2_amd64.deb
 727f1b8d1e703936211c298e0716187877ed0ca9d8028e4c0f95895e7c96d8b4 144378 xorriso_1.4.0-2_amd64.deb
Files:
 6d55eea338c5dba889fc3b77ee54a0df 2349 libs optional libisoburn_1.4.0-2.dsc
 77bc6bcbe023ccd0fb210e341606dfbf 1453974 libs optional libisoburn_1.4.0.orig.tar.gz
 50a1d369f67feccfff6cb39fbcf1f30d 13428 libs optional libisoburn_1.4.0-2.debian.tar.xz
 ffa9f54b852dc9f5a86e43f029963882 876146 debug extra libisoburn-dbg_1.4.0-2_amd64.deb
 94e3ab5c49f937bda63184d09282a1b8 423754 libdevel optional libisoburn-dev_1.4.0-2_amd64.deb
 67e3d44f1f40cb1c20a87b6d97356556 64378 doc optional libisoburn-doc_1.4.0-2_all.deb
 406460e9ffb0c2db9063ab4cf1bcae25 365120 libs optional libisoburn1_1.4.0-2_amd64.deb
 bdffa7e9646d809c68e2e15cf00b8c6b 144378 otherosfs optional xorriso_1.4.0-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hlVx
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 10 Oct 2015 07:25:04 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Mar 7 14:03:20 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.